
VZCZCEIAB45LGY471 
PP RUCNFB 

OE RUHPSGG »7277 U4SOJ19 

ZNY SSSSS 

P 140J19Z FEB 98 

C M USCINCPAC HONOLULU Hi//J39// 

TO RUEKUCS/JOINT STAFF WASHINGTON OC//J09/OPS// 

INFO KUfcKJCS/SECOEF WASHINGTON UC//A$D/L3I/OUSD{P)PS// 

RUCJAAA/USCINCSUC M ACDILL AF8 p l//SUJ^/S0J3/SuJo/Z 
RHCUAAA/USCiNCTRANS CAT SCOTT AFB lL//J2/J3/Jo// 

RUHPSGG/USCINCLANT NORFOLK VA//J2/J3/J6// 

RJCUSTR/USCiNCSTRAT OFFUTT AFB NE//J2/ JO/J6// 

RJPEUNA/USCINCSPACE PbTbRSON AFB C0//SCJ2/SCJO/SCJ6// 

RJFGNOA/USCINCEOR VAIHINGEN GE//ECJ<i/tCJ3/ECJb// 

RJCJACC/USCINCCfcNT MACDlLL AFB FL//CCJ2/CCJ3/CCJ6// 

RJNIAAA/USCIN^SO MIAMI FL//J2/J3/J6// 

RHHrtHAA/CINCPACFLT PEARL HAKBUR H1//N2/N3/N&// 

RJHVPAC/HU PACAF HICKA* AFB Hi//IN/UO/SC// 
RUHEHMS/CUMHA<FORPAC//G2/G3/Go// 

ROEAHIC/CORUSARPAC FT S HAFTfcR HI//APOPS/APIAS// 

RHHJRAP/USARPAC INTEL FT SHAFTER HT//APIN// V,'> * /j{, •' ' jy^/j ['('O’ " C>|^y 
RJAGAAA/CUNUS<OREA SEOUL K0R//FK-J2/FK-J3/FK-J6// 

RUALSFJ/CONUS JAPAN YOKOTA AB jA//j2/J3/j6// 

RUWHHGA/AL CUN ELMEMOORF AFB AK//J2/ 03/ J6// 
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RHHMUnS/COMSOCPAC HONOLULU HI//iOJ2/SUJi/oOJ6// 
R'JETIAA/NSACSS FT GfcQkGE G MEADE .nD//NSUC/Ii/3lP0/V15// 
RJCNFB/F8I WASHINGTON 0C//CiTAC// 

RUEAIIA/CIA WASHINGTON uC//CTG/UI/OTI/IwT// 

RUEKDIA/OIA WASHINGTON OC//TW1/US/J2J/SY/DAJ2A// 
RJEJDCA/DISA WASHINGTON DC//D2/U3/Do/GOiC// 
RJHDPAC/NCPAC HONOLULU Hl//F4/F<»0 
RHHJJAA/JICPAC HONOLULU HI//OlW/Db// 

RUHHAAA/DISA PAC WHEELEk AAF HI//PAC-ASSIST/PC6// 
RJQVKEW/AFIwC KELLY AFB TX//CC/EA/EAC/OiK/IR// 

RUDHIWA/DIRLIWA FT BELVUIR vA//ACtR1/UR/DU// 
RUCBFAD/FLTIN=OWARCEN NURFOLK VA//N<i/N3/Nb/3CI0/CiSU// 
RJLKGXA/NAVIN=OWARACT FT GFURGE G MEADE M0//N3// 

RUQVKJW/JC2WC SAN ANTUNiO TX//DR/UV/OP/PD// 

RUETKEL/IUTC FT GEORGE G MEADt MD//AAG// 

RJHPSAA/NCTAMS PAC HONOLULU HI//N3/N6// 
RHWmUNA/USCINCPAC HONULuLU HI//J2/J3/J3V/J6// 
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r c r o c t p = i m/ /r an, /»ik- 

MSGID/GENAOMIN/J—3R/Ffc8 9B// 
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SuRJ/U5PAC0M CONSOLIOATtO iNFUSfcC GUlUAiMCt FOk UNUSUAL COMPUTER 
INTRUSION ACTIVITY// 

RtF/A/JOINT STAFF MSG DTG 13Id5bZ FtB 9a, SuBj: HtlGHTENEU 
INFORMATION SYSTEMS SECURITY// 

RMKS/l. -<■ b / UCu A STRONG INFURMATIUN SYSTEMS SECURITY 

PDSTURF IS VITAL TO FuLlY SUPPORT OAY-TU-uAY ANU CONTINGENCY 
OPERATIONS WITHIN ThE p ACI p IC THEATER. TU ENSURE AlL USPACUM 
COMMANDS HAVE ACHIFVEO ANU ARE MAINTAINING SUCH A POSTURE, IN 
ADDITION TO REQUIREMENTS LIST fcO IN kEF A, ACCOMPLISH THE FOLLUWiNG 
ACTIONS, IF NUT ALREAUY CUMPLtTfcD s 

A. " 1 ( 0 /II C L UK/GAN/AuS t THt CURRfcNT STATU IS SUSPECT. INSTALL CLRREFT 
SECURITY PATCHES. SECURITY PATCHtS CaN BE UOwNlOADEO FROM 


(b) (3) 10 USC § 130e 


(b) (3) 10 USC § 130e 


ENSUR t TH t 

MOST CURRENT PATCHES FOk YOUR OPERATING SYSTEM ARE INSTALLED. 

9. WCAM . Hi U t) SPECIFICALLY FOR USERS UN THE SULARlS 2.4 

OP FRA TING SYSTEM, REVIEW UATE/TIME STAMP UF All| 

TO ENSURE THE INSTALL DaTlS ARE CUNilSTENT wITH SYS AOMIN ACTIVITY. 
C. (S/kEL UK/CAN/AUS) RUN CRACK AGAINST THE PASSWORD FILES ON ALL 
PILE SPRVERS N/OR YP/NIS SERVERS. CHANGE PASSWORDS FOR THUSE THAT 
CAN BE EASILY CRACKED. 
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PAGE U4 RUHPSSG 7277 SECRET RcL UK 

0. ( ' j/KCL UKPCAH* AUG) REQUEST NEIWURK CONTROL CENTERS TAKE AN ACTIVE 

RJLE IN REVIEWING LUCAL INTRUSION OETcCTlUN SYSTEM TRAFFIC TO ENSURb 
QUICKEST REACTIUN POSSldLE TO SUSPIClUUS AND/UR MALICIOUS NtTwOKK 
ACTIVITY. VIGILANTLY PePURT INFORMATION UF THIS NATURE I AW THEATER 
NcTwOKK INCIDENT REPORTING PROCEDURES. 

E . ■ (liMCL UKK GA* I / »i US I ALL SITES W I TH ' 

SYSTEMS CAREFJLLY SCRUTINIZE THclK SYSTcM AUDIT LUGS FOR UNUSUAL 


ACTIVITY, 

(b) (3) 10 USC § 130e, 18 USC § 798(a) 

(b) (3) 10 USC § 130e, 18 USC § 798(a) 



F. MPK S L U ^ r C ANMUS J EXAMINE LOCAL NETWORKS TU ENSURE USER ACCESS i 
SYSTEM ROUT ACCESS AND UIAL-IN UR RtMUTfc ACCESS HAVE NOT BEEN ALTERED 
OR COMPROMISED. CHANoE OF PASSwOkDS, ESPECIALLY ROUT PASSWORDS, IS 
HIGHLY RECOMMENDED AT THIS TIME. PfcMUTE MAINTENANCE ACCESS, AS WELL 
AS OTHER TYPES OF REMOTE ACCESSES, SHOULD BE SCRUTINIZED AND 


MINIMIZED WHERE POSSIBLE. 


G. (:>/REL UK/CAN/AUS) 

(b) (3) 10 USC § 130e, 18 USC § 798(a) 

(b) (3) 10 USC § 130e, 18 USC § 798(a) 

REVIEW NeTwOkK SERVICES THAT SHOULD NOT BE 


ALLOWED INTO YOUR NETwOkK FROM UFF-INsTALLATIONS AND dLUCK SERVICES 
APPROPRIATELY. 

H. ■■ < UKllCL UK K GAM i f A VS ) INSTALL SHADOWED PASSWORD FILES (IF 


(b) (3) 10 USC § 130e, 18 USC § 798(a) 
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AVAILABLE ) . 

I*. (S/REL UK / CAN/ AUS J 


(b) (3) 10 USC § 130e, 18 USC § 798(a) 


(b) (3) 10 USC § 130e, 18 USC § 798(a) 


J* - t ' M/HCL UK i 1 CAM j r A UG ) ENSURE AlL SYSTEMS HAVfc AN APPROVED WARNING 
BANNERS. THIS IS REQUIRED IN TtlE PVENT THAT LEGAL ACTIUNS ARE 
REQUIRED. 

<• lU/HCL UK/QA 1 !/ AUO ) ACTIVITY FROM .NIL AND .GOV SHUUlD ALSU cE 
REVIEWED. DO NOT ASSUME TRUSTED RELAYIUNSHIPS EXIST. 

L. - <!jj<KCL UKRCANifAUtl CHECK FOR THfc tXISrENCt UF THE FOLLOWING 
FILES : 


(b) (3) 10 USC § 130e, 18 USC § 798(a) 


(b) (3) 10 USC § 130e, 18 USC § 798(a) 


M. .( ‘ J/UCL UKi> O i M I / AUC I INCREASE OPSEC AWARENESS WITH SENSITIVITY TO 

WHAT IS PLACED ON THE NIPRNtT. REMINDER: SENSITIVE INFORMATION 
SHOULD NOT BE TRANSMITTED OVER THE NlPRNET. 


N. (S/ 

REL UK/CAN/AUS) 

(b) (3) 10 USC § 130e, 18 USC § 798(al 

(b) (3) 

(b) (3) 10 U: 

i 10 USC§ 1 

SC G 130e. 18USCG7S 

1 3( 

18(a) 

De, 18 USC § 798(a) 


CHECKING IF THE STATO PATCH HAS BEEN CHANGED SINCE 3 FEB 98. 

0. " 1 cm CL UOCAHMUO » REVIEW OPTIONS, AND OPERATIONAL IMPACTS LF, 
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(b)(6) 


(b)(6) 


PAGE vj6 RUHPSSG7277-^-g G n C T OLE .h. 

DISCONNECTING ALL BRlDGtS BETWEEN UNCLASSIFIED AND CLASSIFIED 
NETWORKS* SUCH AS SECURE MAIL GUARD (SMG) BETwEEN UNCLASSIFIED AND 
SECRET LANS. 

2. <U) POINTS OF CONTACT: NORMAL DUTY HOURS, PUC IS| 

COMM (B 08) 477-4221. AFTER DUTY HOURS, CONTACT THE CDU AT D SN 
4 77—7 <£27// 

CLBY: RADM MOBLEY, J-i; REASON: l.GlAJ? DhCLON: 8 FEB 08 
8 T 

17 277 
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